Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
File:                     34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa (raw, json)
Hash identifier:          aNNPA+A7WEogV+62jM6WYRR1KlhPxTsxC+ksmba7gq0=
Subject key identifier:   09:01:07:39:B9:C7:8B:1A:AB:6D:23:EA:04:48:C4:55:34:A9:82:65
Certificate issuer:       /CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
Certificate serial:       6CF8580DC5A7DD3EFAE12C6DD7D547781AFA4199
Authority key identifier: 2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa
Signing time:             Thu 04 Apr 2024 08:22:06 +0000
ROA not before:           Thu 04 Apr 2024 08:17:06 +0000
ROA not after:            Thu 03 Apr 2025 08:22:06 +0000
asID:                     264996
IP address blocks:        45.179.128.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl
                          rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 16:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f8:58:0d:c5:a7:dd:3e:fa:e1:2c:6d:d7:d5:47:78:1a:fa:41:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3F12E944719F24A8D1A4B3C7980F70A6D99D69
        Validity
            Not Before: Apr  4 08:17:06 2024 GMT
            Not After : Apr  3 08:22:06 2025 GMT
        Subject: CN=09010739B9C78B1AAB6D23EA0448C45534A98265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:54:49:56:b9:13:16:5d:b8:df:e3:1f:9b:61:
                    f5:d3:ee:6b:5d:70:85:c7:e4:4e:49:7a:a6:da:0b:
                    a9:a0:ae:c5:19:04:dd:c3:73:62:c9:8b:6a:bd:9e:
                    0f:57:c6:6c:4e:83:f6:29:ed:af:83:1c:23:93:8e:
                    98:4d:2a:14:0b:22:2f:27:5e:f5:04:60:ad:03:6c:
                    22:d2:36:b9:79:c7:cf:1e:4b:b8:10:e8:c2:2b:45:
                    ff:b6:2a:41:1e:c1:f3:09:c9:d1:cd:2f:8c:b9:b7:
                    8a:4a:83:7a:5d:72:3f:41:a4:38:5b:5b:2c:2e:e8:
                    98:e6:17:bd:f4:3e:d2:c6:b2:88:6f:10:d7:4e:cc:
                    b7:09:8f:44:25:5b:34:d8:65:91:7a:8d:78:ff:5d:
                    15:f8:fa:cc:b2:d2:9d:8f:28:6b:ec:e6:60:b9:31:
                    f5:ae:13:49:49:ba:8e:74:b1:09:49:bd:2a:8f:9a:
                    27:0a:48:a2:cb:06:1f:b8:4e:17:cc:0b:ba:d3:54:
                    b1:fa:44:a2:45:18:d7:aa:7c:34:de:22:37:68:72:
                    0e:89:2c:21:67:c2:94:74:e1:98:4c:ad:78:24:b0:
                    5e:ee:0b:47:1c:99:73:73:c5:4d:57:85:22:bc:27:
                    68:4f:d3:d0:1f:90:41:ec:e6:7d:12:04:6c:72:48:
                    f9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:07:39:B9:C7:8B:1A:AB:6D:23:EA:04:48:C4:55:34:A9:82:65
            X509v3 Authority Key Identifier:
                keyid:2F:3F:12:E9:44:71:9F:24:A8:D1:A4:B3:C7:98:0F:70:A6:D9:9D:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3F12E944719F24A8D1A4B3C7980F70A6D99D69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3svjoeHGpRRtLe8sGyZNGLdTwUyiDdcRwnibbjy8R9et/1/34352e3137392e3132382e302f32332d3233203d3e20323634393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:e7:58:3a:9d:a2:6d:74:55:7b:b6:63:e9:c2:bb:2d:77:
         21:69:97:d1:b5:13:71:22:c4:36:36:cd:f1:6d:25:3f:64:34:
         25:fe:6c:ed:ee:30:46:0d:3a:a3:3e:15:ac:7b:4a:23:bb:36:
         9e:18:34:c0:93:9a:1c:99:d4:75:67:d4:ed:53:18:d6:3c:25:
         72:27:64:57:be:f3:2b:26:21:a0:23:2e:04:e7:6a:8e:54:69:
         c0:e8:87:91:b9:d0:05:aa:76:bc:5d:1b:4d:b7:3f:91:f8:24:
         06:04:04:cb:2d:f7:04:ab:6d:c3:04:c3:1a:88:45:5d:d9:ba:
         22:dd:a2:19:f9:4b:5c:27:a9:45:c9:70:31:21:c0:09:05:c9:
         8c:62:94:e4:9c:59:3d:68:3a:8c:a2:e1:4b:b2:f0:5f:64:e4:
         87:fb:66:60:0f:9e:28:ba:0a:c0:47:09:07:a9:0d:5b:e5:fb:
         b9:64:e6:c4:7d:fe:71:e1:a4:5a:f2:e3:a2:5f:04:90:42:3b:
         1c:75:f0:b8:9d:29:66:d7:f4:02:2b:96:28:4c:0e:b8:46:fb:
         c0:5e:ec:6b:46:d4:5e:db:7c:cc:f2:9b:8d:23:a0:da:56:e9:
         17:e9:45:27:14:c3:fc:91:d6:41:92:52:68:00:6f:d7:ba:d2:
         04:08:f0:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbPhYDcWn3T764Sxt19VHeBr6QZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYzRjEyRTk0NDcxOUYyNEE4RDFBNEIzQzc5ODBGNzBB
NkQ5OUQ2OTAeFw0yNDA0MDQwODE3MDZaFw0yNTA0MDMwODIyMDZaMDMxMTAvBgNV
BAMTKDA5MDEwNzM5QjlDNzhCMUFBQjZEMjNFQTA0NDhDNDU1MzRBOTgyNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VElWuRMWXbjf4x+bYfXT7mtd
cIXH5E5JeqbaC6mgrsUZBN3Dc2LJi2q9ng9XxmxOg/Yp7a+DHCOTjphNKhQLIi8n
XvUEYK0DbCLSNrl5x88eS7gQ6MIrRf+2KkEewfMJydHNL4y5t4pKg3pdcj9BpDhb
Wywu6JjmF730PtLGsohvENdOzLcJj0QlWzTYZZF6jXj/XRX4+syy0p2PKGvs5mC5
MfWuE0lJuo50sQlJvSqPmicKSKLLBh+4ThfMC7rTVLH6RKJFGNeqfDTeIjdocg6J
LCFnwpR04ZhMrXgksF7uC0ccmXNzxU1XhSK8J2hP09AfkEHs5n0SBGxySPn1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCQEHObnHixqrbSPqBEjEVTSpgmUwHwYDVR0j
BBgwFoAULz8S6URxnySo0aSzx5gPcKbZnWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3N2am9lSEdwUlJ0TGU4c0d5Wk5HTGRUd1V5aURkY1J3bmliYmp5OFI5
ZXQvMS8yRjNGMTJFOTQ0NzE5RjI0QThEMUE0QjNDNzk4MEY3MEE2RDk5RDY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGM0YxMkU5NDQ3MTlGMjRB
OEQxQTRCM0M3OTgwRjcwQTZEOTlENjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNzdmpvZUhHcFJSdExlOHNHeVpOR0xkVHdVeWlEZGNSd25pYmJqeThSOWV0LzEv
MzQzNTJlMzEzNzM5MmUzMTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzOTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEts4AwDQYJKoZIhvcNAQELBQADggEBACsk51g6
naJtdFV7tmPpwrstdyFpl9G1E3EixDY2zfFtJT9kNCX+bO3uMEYNOqM+Fax7SiO7
Np4YNMCTmhyZ1HVn1O1TGNY8JXInZFe+8ysmIaAjLgTnao5UacDoh5G50AWqdrxd
G023P5H4JAYEBMst9wSrbcMEwxqIRV3ZuiLdohn5S1wnqUXJcDEhwAkFyYxilOSc
WT1oOoyi4Uuy8F9k5If7ZmAPnii6CsBHCQepDVvl+7lk5sR9/nHhpFry46JfBJBC
Oxx18LidKWbX9AIrlihMDrhG+8Be7GtG1F7bfMzym40joNpW6RfpRScUw/yR1kGS
UmgAb9e60gQI8Is=
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org